COnfiguring NSG rule using ARM template

sns 9,226

I want to achieve that particular VM should be accessible only from my laptop not from not anywhere else
for this I want to use Azure ARM,

I have been trying but failing.

I configured the NSG inbound rule to do so with source as my laptop IP and by allowing RDP ( 3389 port) ,but when I test it is failing. Please suggest

Thanks

ChaitanyaNaykodi-MSFT 22,776 Reputation points Microsoft Employee

2022-12-09T00:43:29.173+00:00

@sns ,

Thank you for reaching out. Can you please elaborate more on any error received here? Were you able to RDP into your VM using any other IP? Thank you!
sns 9,226 Reputation points

2022-12-09T03:46:27.16+00:00

Hi Chaitanya,

I have added inbound RDP rule to connect to VM using my laptop IP from azure portal. But while connecting by default it is taking to default Public IP of VM

How do I make sure to connect that VM using my laptop specifically. ? Please suggest.

I
ChaitanyaNaykodi-MSFT 22,776 Reputation points Microsoft Employee

2022-12-12T17:14:37.537+00:00

@sns ,
Thank you sharing additional details.

Setting a NSG rule is the correct way to allow only specific IP to connect to the VM.

Just to confirm can you please validate if the NSG rule is applied for the correct VM and also check if the priority is correctly set-up as well? You can follow this documentation here.
sns 9,226 Reputation points

2022-12-13T04:55:11.577+00:00

Hi Chaithnya,

Thank you for the response.
I have tried in same way as per the document, but with laptop IP I am not able to connect to RDP of azure VM even though I have configured inbound NSG rule with that laptop. Please suggest further. Thank you

Accepted answer

ChaitanyaNaykodi-MSFT 22,776 Reputation points Microsoft Employee

2022-12-13T19:39:28.1+00:00

@sns ,
Thank you for providing additional details here.

I see that you have added the Private IP address 192.168.175.1 as the source IP address in your NSG rule. RDP connections work over the internet so unless you have a Point to site VPN set-up, the RDP communication will take place using your local machine's Public IP address and not the private IP mentioned above.

If you are not using a Point to site VPN you will need to add the Public IP of your local machine as the source IP of the NSG rule.

Alternate solution here will be to use Azure Bastion with Native Client support and using AAD you can restrict the access to the Virtual Machine.

Please let me know if you have any additional questions. Thank you!
Please sign in to rate this answer.

1 person found this answer helpful.
sns 9,226 Reputation points

2022-12-28T04:01:03.127+00:00

HI Chaitanya,

Can you please assist on below issue also?
https://learn.microsoft.com/en-us/answers/questions/1137720/vm-creation-using-arm-template.html
Sign in to comment

COnfiguring NSG rule using ARM template

0 additional answers